Fasten has been rewritten/rearchitected to be a SPA.

• Fasten license changed to GPLv3
• Fasten is now designed to eventually support zero-knowledge encryption - all healthcare provider access is done on the client side, where data will (eventually) be encrypted with a user provided key BEFORE sending to backend/database.
• Golang backend has been gutted, only webserver, CORS relay and couchDB shim remain.
• Migrated from SQLite to CouchDB as internal datastore
• Code to communicate with healthcare providers has been moved into a Typescript library.
• All processing of data from healthcare providers is done via web-workers - keeping the UI snappy.
• OAuth flow now leverages url fragments allowing healthcare providers to pass back transient authorization codes without hitting a Fasten server.

WIP/Broken

• manual uploads of FHIR bundles are not supported (functionality was removed during refactor — will be re-added)
• refresh tokens (eventually used for background sync) may not be working consistently — you may need to reconnect
• Still no encryption at rest.